Google uncovers Coruna iOS Exploit Kit targeting iOS 13–17.2.1
Google uncovers Coruna iOS Exploit Kit targeting iOS 13–17.2.1 Pierluigi Paganini March 05, 2026 Google warns of the Coruna iOS...
Malware
From phishing to Google Drive C2: Silver Dragon expands APT41 playbook
From phishing to Google Drive C2: Silver Dragon expands APT41 playbook Pierluigi Paganini March 04, 2026 APT group Silver Dragon,...
Data breach at University of Hawaiʻi Cancer Center impacts 1.2 Million individuals
Data breach at University of Hawaiʻi Cancer Center impacts 1.2 Million individuals Pierluigi Paganini March 04, 2026 A ransomware attack...
Chrome Extension Hijacked to Deliver Malware, Steal Crypto Wallets
Image: madedee/Adobe A once-trusted Chrome extension with thousands of users was quietly transformed into a malware delivery vehicle, exposing how...
SANDWORM_MODE: The Rise of Adaptive Supply Chain Worms
Earlier this year, we asked our team where they expect open source cyberattacks to go next. Sonatype Principal Security...
SANDWORM_MODE: The Rise of Adaptive Supply Chain Worms
Earlier this year, we asked our team where they expect open source cyberattacks to go next. Sonatype Principal Security...
Russia-linked APT28 exploited MSHTML zero-day CVE-2026-21513 before patch
Russia-linked APT28 exploited MSHTML zero-day CVE-2026-21513 before patch Pierluigi Paganini March 02, 2026 Russia-linked APT28 reportedly exploited MSHTML zero-day CVE-2026-21513...
APT37 combines cloud storage and USB implants to infiltrate air-gapped systems
APT37 combines cloud storage and USB implants to infiltrate air-gapped systems Pierluigi Paganini March 02, 2026 North Korea-linked APT 37...
CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instances
CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instances Pierluigi Paganini March 01, 2026 About 900 Sangoma FreePBX systems were infected with...
Security Affairs newsletter Round 565 by Pierluigi Paganini – INTERNATIONAL EDITION
This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies...
Aeternum botnet hides commands in Polygon smart contracts
Aeternum botnet hides commands in Polygon smart contracts Pierluigi Paganini February 27, 2026 Aeternum botnet uses Polygon blockchain smart contracts...
UAT-10027 campaign hits U.S. education and healthcare with stealthy Dohdoor backdoor
UAT-10027 campaign hits U.S. education and healthcare with stealthy Dohdoor backdoor Pierluigi Paganini February 26, 2026 UAT-10027 campaign is targeting...
Google GTIG disrupted China-linked APT UNC2814 halting attacks on 53 orgs in 42 countries
Google GTIG disrupted China-linked APT UNC2814 halting attacks on 53 orgs in 42 countries Pierluigi Paganini February 26, 2026 Google...
ShinyHunters cyberattack on CarGurus impacts 12.4 Million users
ShinyHunters cyberattack on CarGurus impacts 12.4 Million users Pierluigi Paganini February 25, 2026 ShinyHunters leaked data from 12.4M CarGurus accounts,...
Lazarus APT group deployed Medusa Ransomware against Middle East target
Lazarus APT group deployed Medusa Ransomware against Middle East target Pierluigi Paganini February 25, 2026 North Korea’s Lazarus Group used...
